{{- if .Values.api7.enabled }}
apiVersion: batch/v1
kind: Job
metadata:
  name: {{ include "api7ee.fullname" . }}-adc-sync
  labels:
    {{- include "api7ee.labels" . | nindent 4 }}
    app.kubernetes.io/component: adc-sync
  annotations:
    "helm.sh/hook": post-install,post-upgrade
    "helm.sh/hook-weight": "10"
    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
spec:
  backoffLimit: 3
  activeDeadlineSeconds: 300
  template:
    metadata:
      labels:
        {{- include "api7ee.selectorLabels" . | nindent 8 }}
        app.kubernetes.io/component: adc-sync
    spec:
      restartPolicy: Never
      serviceAccountName: {{ include "api7ee.serviceAccountName" . }}
      containers:
        - name: adc-sync
          image: ghcr.io/api7/adc:latest
          imagePullPolicy: IfNotPresent
          args:
            - sync
            - -f
            - /config/adc-config.yaml
            - --backend
            - {{ .Values.api7.backend | default "api7ee" }}
            - --server
            - $(API7_ADMIN_URL)
            - --token
            - $(API7_ADMIN_KEY)
            - --gateway-group
            - $(API7_GATEWAY_GROUP)
            {{- if .Values.api7.adc.tlsSkipVerify }}
            - --tls-skip-verify
            {{- end }}
            {{- if .Values.api7.adc.verbose }}
            - --verbose
            {{- end }}
          env:
            - name: API7_ADMIN_URL
              valueFrom:
                secretKeyRef:
                  name: {{ .Values.api7.gateway.existingSecret | default (printf "%s-api7-admin" (include "api7ee.fullname" .)) }}
                  key: {{ .Values.api7.gateway.existingSecretKeys.adminUrl | default "admin-url" }}
            - name: API7_ADMIN_KEY
              valueFrom:
                secretKeyRef:
                  name: {{ .Values.api7.gateway.existingSecret | default (printf "%s-api7-admin" (include "api7ee.fullname" .)) }}
                  key: {{ .Values.api7.gateway.existingSecretKeys.adminKey | default "admin-key" }}
            - name: API7_GATEWAY_GROUP
              valueFrom:
                secretKeyRef:
                  name: {{ .Values.api7.gateway.existingSecret | default (printf "%s-api7-admin" (include "api7ee.fullname" .)) }}
                  key: {{ .Values.api7.gateway.existingSecretKeys.group | default "gateway-group" }}
          volumeMounts:
            - name: adc-config
              mountPath: /config
              readOnly: true
          {{- if .Values.api7.adc.resources }}
          resources:
            {{- toYaml .Values.api7.adc.resources | nindent 12 }}
          {{- end }}
      volumes:
        - name: adc-config
          configMap:
            name: {{ include "api7ee.fullname" . }}-adc-config
{{- end }}